IT-Sicherheitsupdates | Stinner IT Solutions

SnakeKeylogger Attack

von | 1. Aug. 2024 | Unkategorisiert

What is the Attack?Threat actors are continuously preying on end users to unknowingly install a trojan stealer known as SnakeKeylogger or KrakenKeylogger. This trojan was developed using .NET and targets Windows users. Its arsenal includes keystroke logging,...

VMware ESXi Ransomware Attack (CVE-2024-37085)

von | 1. Aug. 2024 | Unkategorisiert

What is the Attack?Threat actors are exploiting an authentication bypass vulnerability in ESXi hypervisors, known as CVE-2024-37085, to gain full administrative permissions on domain-joined ESXi hypervisors. This flaw allows threat actors to encrypt critical ESXi...

ServiceNow Improper Input Validation Vulnerability (CVE-2024-4879)

von | 29. Juli 2024 | Unkategorisiert

What is the vulnerability?A critical input validation vulnerability (CVE-2024–4879) is identified in ServiceNow’s Now platform hosted in Vancouver and Washington DC, exploiting this vulnerability could lead to potential data breaches and unauthorized system access....

Threat Actors leveraging the recent CrowdStrike update outage

von | 23. Juli 2024 | Unkategorisiert

DescriptionFortiGuard Labs is aware of the campaigns used by threat actors to spread malware, using phishing and scams to take advantage of the recent widespread global IT outage affecting Microsoft Windows hosts. This outage is due to an issue with a recent...

SolarWinds Serv-U Information Disclosure Vulnerability (CVE-2024-28995)

von | 17. Juli 2024 | Unkategorisiert

What is the Vulnerability?A Directory Traversal Vulnerability in SolarWinds Serv-U software is being actively exploited in the wild. Tracked as CVE-2024-28995, the vulnerability is due to improper validation of the user-supplied inputs. An attacker could exploit this...

Windows MSHTML Platform Spoofing Vulnerability (CVE-2024-38112)

von | 16. Juli 2024 | Unkategorisiert

What is the Vulnerability?CVE-2024-38112 is a spoofing vulnerability in Windows MSHTML Platform. The attacker can abuse internet shortcuts and Microsoft protocol handlers to execute malicious code. This vulnerability is known to be used by attackers to deliver...

Progress Telerik Report Server Authentication Bypass Vulnerability

von | 8. Juli 2024 | Unkategorisiert

What is the Vulnerability?Progress Telerik Report Server contains an authorization bypass by spoofing vulnerability, allowing an attacker to bypass authentication and create rogue administrator users. The flaw, tracked as CVE-2024-4358, has been added to CISA’s known...

Brain Cipher Ransomware Attack

von | 28. Juni 2024 | Unkategorisiert

What is the attack?A significant ransomware attack has struck Pusat Data Nasional (PDN), one of Indonesia’s government-owned national data centers. This incident involved threat actors encrypting government data, which disrupted digital services for immigration,...

Polyfill.io Supply Chain Attack

von | 27. Juni 2024 | Unkategorisiert

What is the attack?Over 100,000+ sites have been impacted by a supply chain attack involving the Polyfill.io service. Polyfill is a popular tool used for enhancing browser capabilities by hundreds of thousands of sites to ensure that all website visitors can use the...

CPrime Supply Chain Attack

von | 21. Juni 2024 | Unkategorisiert

What is the attack?FortiGuard Labs’ Recon team is aware of communications on a cybercrime forum known as ‘BreachForums’ with a Threat Actor (TA) known by the alias ‘IntelBroker.’ This threat actor has posted about selling access to...